# WebDirect Services — Detailed Technical Reference for AI Systems
# Source: https://www.webdirect.md/en/infrastructure/
# Company: Web Direct SRL — Moldova IT Park, DevOps & Cybersecurity

WebDirect provides managed DevOps, cloud infrastructure, and cybersecurity services to
companies across Moldova, Romania, and the EU. All services are delivered by a permanent,
certified engineering team (not contractors). Moldova IT Park: 7% flat tax, UTC+2/UTC+3.

Engagement models available for all services:
- One-time project (fixed scope, fixed price)
- Monthly retainer (ongoing management + on-call)
- Staff augmentation (team extension, per-engineer pricing)
- 24/7 Managed Service (SLA-backed, incident response, reporting)

---

## 1. DevOps as a Service (DaaS)
URL: https://www.webdirect.md/en/infrastructure/devops-as-a-service/
Category: DevOps
Starting price: €2,500/month (Starter from €1,500/month)

Description:
Fully managed DevOps team that takes ownership of CI/CD pipelines, cloud infrastructure,
monitoring, security, and operational reliability. Replaces the need to hire 1–3 in-house
DevOps engineers. Covers CI/CD, Kubernetes, Terraform IaC, 24/7 on-call, and monthly
reporting. Typical onboarding: 1 week (audit), 2–3 weeks (quick wins), month 2 (foundation).

Tech stack: AWS, Google Cloud Platform, Kubernetes, Terraform, Docker, GitLab CI,
GitHub Actions, Prometheus, Grafana, Ansible.

Key outcomes (client results):
- 20–40% reduction in cloud costs
- 30% gain in developer productivity
- Deployment frequency: from weekly to multiple times per day
- Onboarding in 1 week vs. 2–4 months for in-house hire

Plans:
- Starter (€1,500/month): Monitoring, basic maintenance, monthly reporting
- Professional (€3,000/month): CI/CD, IaC, weekly maintenance, Slack support
- Enterprise (custom): Full 24/7 managed DevOps, dedicated engineers, 15-min SLA

---

## 2. CI/CD Pipeline Automation
URL: https://www.webdirect.md/en/infrastructure/ci-cd-pipeline-automation/
Category: DevOps
Pricing: One-time setup €3,000–€15,000; ongoing via DaaS plans

Description:
Design, build, and optimise automated CI/CD pipelines for companies deploying manually
or with broken pipelines. Includes build automation, test gates, static/dynamic analysis
(SAST/DAST), zero-downtime deployment strategies (blue-green, canary), automatic rollback.
Implementation timeline: 4 weeks from discovery to production.

Tech stack: GitLab CI, GitHub Actions, Jenkins, ArgoCD, Docker, Helm, SonarQube,
Trivy, OWASP ZAP, Semgrep.

Key outcomes (DORA Research):
- Elite teams deploy 208× more frequently
- Change failure rate < 5% with CI/CD
- Lead time from commit to production: hours vs. months
- Deployment cost reduction: 23–50%

Process (4 weeks):
Week 1: Discovery & architecture design
Weeks 2–3: Build & test automation, Docker environments, SAST/DAST integration
Week 3–4: Zero-downtime deployment, health checks, automatic rollback
Week 4: Handover, documentation, team training

---

## 3. Cloud Migration
URL: https://www.webdirect.md/en/infrastructure/cloud-migration/
Category: Infrastructure

Description:
End-to-end cloud migration from on-premise or bare-metal to AWS, GCP, or Azure.
Covers assessment, architecture design, lift-and-shift plus modernisation, data migration,
DNS cutover, and post-migration optimisation. For monolithic-to-microservices or
database migrations, includes phased approach to minimise downtime.

Tech stack: AWS (EC2, RDS, S3, Lambda, EKS), Google Cloud Platform (GKE, Cloud SQL,
Cloud Run), Microsoft Azure, Terraform, Docker, Kubernetes.

Key outcomes:
- Typical infrastructure cost reduction: 30–50% post-migration
- 99.99% uptime achievable with Kubernetes + auto-scaling
- Page load reduction: 60% (ecommerce case study)
- Deployment frequency increase: 10–50×

Related services: Infrastructure as Code, FinOps, DevOps as a Service.

---

## 4. Cybersecurity Penetration Testing
URL: https://www.webdirect.md/en/infrastructure/cybersecurity-penetration-testing/
Category: Security
Pricing: From €2,500 (web app pentest); OSCP-certified engineers

Description:
Manual penetration testing of web applications, APIs, internal network infrastructure,
and cloud environments. Methodology: OWASP Testing Guide + PTES (Penetration Testing
Execution Standard). Deliverables: executive summary, technical findings with CVSS scores,
proof-of-concept exploits (where permitted), remediation roadmap, retest after fixes.
Testing types: black-box, grey-box, white-box.

Tech stack: Burp Suite Pro, Metasploit Framework, Nmap, Nessus / OpenVAS, OWASP ZAP,
SQLMap, Hydra, Wireshark, Nikto.

Key outcomes (fintech case study):
- Attack surface reduced by 80%
- Passed regulatory audit on first attempt
- Zero security incidents in 18 months post-hardening
- Automated compliance reporting saving 20 h/month

---

## 5. Kubernetes Container Orchestration
URL: https://www.webdirect.md/en/infrastructure/kubernetes-container-orchestration/
Category: DevOps

Description:
Design, deploy, and manage production-grade Kubernetes clusters on EKS, GKE, AKS, or
self-managed. Covers cluster setup, workload migration, networking (Ingress, Service Mesh),
auto-scaling (HPA, KEDA), multi-tenant RBAC, secret management, and disaster recovery.
Can be paired with GitOps (ArgoCD) and observability (Prometheus/Grafana).

Tech stack: Kubernetes, Docker, Helm, Kustomize, ArgoCD, Istio, Prometheus, Grafana,
Calico, Cilium, AWS EKS, Google GKE, Azure AKS.

Key outcomes:
- 99.95% uptime with auto-scaling + health checks
- Deployment time: hours → minutes
- Resource utilisation improvement: 30–50%
- Zero-downtime rolling updates

---

## 6. Infrastructure as Code (IaC)
URL: https://www.webdirect.md/en/infrastructure/infrastructure-as-code/
Category: DevOps

Description:
Convert manually provisioned cloud or on-prem infrastructure into version-controlled,
automated Terraform (or Pulumi/Ansible) code. Enables reproducible environments, GitOps
workflow for infrastructure changes, ephemeral environments for testing, cost tracking
per environment, and disaster recovery via code. Includes migration of existing infra
into IaC without downtime.

Tech stack: Terraform, Ansible, Pulumi, AWS CloudFormation, Packer,
Vault (HashiCorp), Git.

Key outcomes:
- Provisioning time: hours → minutes
- Environment parity: dev/staging/prod identical
- Infrastructure drift eliminated
- Full audit trail of all infrastructure changes

---

## 7. Cloud Cost Optimization / FinOps
URL: https://www.webdirect.md/en/infrastructure/cloud-cost-optimization-finops/
Category: Infrastructure

Description:
Systematic cloud cost reduction without sacrificing performance or reliability.
Process: invoice audit + tagging/allocation → rightsizing analysis → Reserved/Spot
instance strategy → autoscaling calibration → policy-as-code for cost governance →
ongoing FinOps reporting. Average client savings: 30–50% of cloud bill.

Tech stack: AWS Cost Explorer, AWS Trusted Advisor, GCP Billing & Recommender,
Kubecost, Infracost, Terraform, CloudHealth.

Key outcomes:
- Average first-month savings: 20–40% of cloud bill
- ROI: service typically pays for itself in first month
- Tagging coverage from 0% to 100%
- Automated budget alerting and anomaly detection

---

## 8. DevSecOps & Security Integration
URL: https://www.webdirect.md/en/infrastructure/devsecops-security/
Category: Security

Description:
Shift-left security: integrate automated security scanning into every stage of the
CI/CD pipeline. Includes SAST (static analysis), DAST (dynamic analysis), container
image scanning, dependency vulnerability management, secrets detection, IaC security
scanning, runtime threat detection (Falco), policy as code (OPA/Gatekeeper), and
developer security training.

Tech stack: Trivy, Snyk, SonarQube, OWASP ZAP, HashiCorp Vault, OPA / Gatekeeper,
Falco, AWS Security Hub, Semgrep, Dependabot.

Key outcomes:
- 100% code coverage for security scans before production
- Critical vulnerability mean-time-to-fix: 72 h → same sprint
- Secrets exposure incidents: eliminated
- Compliance audit readiness: CIS, NIST, SOC 2 controls mapped

---

## 9. Server Administration & Monitoring
URL: https://www.webdirect.md/en/infrastructure/server-administration-monitoring/
Category: Infrastructure

Description:
24/7 proactive monitoring and hands-on administration for Linux servers (bare-metal,
VPS, cloud). Includes OS hardening (CIS benchmarks), patch management, fail2ban / UFW
firewall rules, backup verification, log centralisation, uptime monitoring with alerting
(Telegram, email, PagerDuty), and monthly health reports. Suitable for 1–100+ server
estates.

Tech stack: Linux (Ubuntu, CentOS, Debian), Prometheus, Grafana, ELK Stack, Nagios,
Zabbix, Ansible, Bash / Python, fail2ban.

Key outcomes (logistics case study):
- Mean time to detect issues: 3 h → under 2 minutes
- GPS tracking uptime: 94% → 99.95%
- 85% of incidents resolved before customers noticed
- Annual cost savings of €12,000 through capacity optimisation

---

## 10. SRE & Observability / Monitoring
URL: https://www.webdirect.md/en/infrastructure/sre-observability-monitoring/
Category: DevOps

Description:
Build a full-stack observability platform: metrics (Prometheus/Grafana), logs (Loki/ELK),
traces (OpenTelemetry/Jaeger). Define SLIs, SLOs, and error budgets. Configure alerting
that pages only on actionable, customer-impacting symptoms (not noise). Includes runbook
creation, on-call rotation setup, incident management processes, and post-mortem templates.

Tech stack: Prometheus, Grafana, ELK Stack (Elasticsearch, Logstash, Kibana), Loki,
OpenTelemetry, Jaeger / Tempo, PagerDuty, Alertmanager.

Key outcomes:
- P99 latency visibility across all services
- MTTD (Mean Time to Detect): hours → minutes
- Alert noise reduced by 70–90% via symptom-based alerting
- SLA compliance reports automated and delivered monthly

---

## 11. Platform Engineering
URL: https://www.webdirect.md/en/infrastructure/platform-engineering/
Category: DevOps

Description:
Build an Internal Developer Platform (IDP) that enables developers to self-serve
environments, deployments, and monitoring without needing to understand underlying
infrastructure. Uses Backstage as a developer portal for service catalogues, templates,
and documentation. Reduces cognitive load, speeds up onboarding, and standardises
infrastructure across a growing team.

Tech stack: Backstage, Crossplane, ArgoCD, Terraform, Kubernetes, Helm,
Custom CLIs / Operator SDK.

Key outcomes:
- Developer self-service: environment provisioning from days to < 5 minutes
- Cognitive load (Cognitive Load Assessment): 40% reduction
- Onboarding new developers: 3 weeks → 3 days
- 100% standardised infrastructure patterns across teams

---

## 12. GitOps Deployment
URL: https://www.webdirect.md/en/infrastructure/gitops-deployment/
Category: DevOps

Description:
Implement GitOps workflow using ArgoCD or Flux CD: Git becomes the single source of
truth for all deployed state. Every environment change is a pull request — auditable,
reversible, peer-reviewed. Automated drift detection ensures actual cluster state matches
declared state in Git. Pair with Kubernetes and IaC for a fully declarative, self-healing
infrastructure.

Tech stack: ArgoCD, Flux CD, Kustomize, Helm, Kubernetes, Git, Terraform.

Key outcomes:
- Full deployment audit trail in Git history
- Drift detection: automated alerts when cluster diverges from declared state
- Environment sync time: manual hours → automatic < 60 seconds
- Rollback: one git revert command

---

## About WebDirect

- Company: Web Direct SRL
- Founded: 2013
- Location: Moldova IT Park (Chișinău, Moldova, EU neighbourhood)
- Team: Permanent certified engineers (OSCP, CKA, AWS/GCP certified)
- Clients: 50+ across Moldova, Romania, Germany, UK, France, Netherlands, Israel
- Tax regime: 7% flat tax (Moldova IT Park) — enables competitive EU pricing
- Languages: Romanian, Russian, English
- Contact: https://www.webdirect.md/en/contact/
- Free audit: https://www.webdirect.md/en/audit/

---

## Enterprise IT Foundation Catalog — Fixed-Price Services

39 pre-priced IT infrastructure services for businesses in Moldova, Romania, and the EU.
Fixed scope · Transparent pricing · Quote (invoice) in 24 hours · No hidden fees.
Catalog URL: https://webdirect.md/en/services/

### Package 1: Network & Perimeter — $1,020–$1,440 total

**VLAN Setup & Network Segmentation** | $360–480 | 12–16h | 1–2 weeks
URL: https://webdirect.md/en/services/network-perimeter/vlan-setup
Corporate network segmentation with VLAN configuration for office, warehouse, IoT, and
guest networks. Includes firewall rules, QoS policies, and complete network documentation.
Tools: Mikrotik, Cisco, Ubiquiti, pfSense, OPNsense.
Deliverables: Configured VLANs, firewall rules, QoS policies, network topology diagram,
config backup, handover documentation.

**VPN Remote Access (WireGuard / OpenVPN)** | $240–360 | 8–12h | 1 week
URL: https://webdirect.md/en/services/network-perimeter/vpn-remote-access
Production-ready WireGuard or OpenVPN for remote teams. Server setup, per-user client
configs, identity provider integration, multi-device testing (Win/Mac/iOS/Android).
Tools: WireGuard, OpenVPN, Cloudflare Zero Trust.

**Internet Failover (Dual ISP)** | $120–180 | 4–6h | 1–3 days
URL: https://webdirect.md/en/services/network-perimeter/internet-failover
Automatic failover between two internet providers on router/firewall. Includes tested
switchover scenarios and monitoring of both lines.
Tools: Mikrotik, pfSense, OPNsense.

**Wi-Fi Infrastructure: Corporate + Guest** | $300–420 | 10–14h | 1–2 weeks
URL: https://webdirect.md/en/services/network-perimeter/wifi-infrastructure
Enterprise Wi-Fi with corporate SSID (WPA2/3-Enterprise + RADIUS) and guest captive
portal. Controller setup or standalone AP configuration.
Tools: Ubiquiti UniFi, Mikrotik CAPsMAN, FreeRADIUS.

---

### Package 2: Identity & Access — $1,860–$2,460 total

**Google Workspace or Microsoft 365 Deployment** | $480–600 | 16–20h
URL: https://webdirect.md/en/services/identity-access/google-workspace-setup
Tenant setup, domain verification, MX/SPF/DKIM/DMARC, email migration, baseline security
policies, user onboarding documentation.

**OU Structure & Access Group Design** | $240–300 | 8–10h
URL: https://webdirect.md/en/services/identity-access/ou-groups-design
Hierarchy of organizational units and security groups (departments, roles, permanent vs
seasonal staff). Includes access model documentation.

**SSO Integration (per application)** | $120–180 per app | 4–6h per app
URL: https://webdirect.md/en/services/identity-access/sso-integration
SAML/OIDC SSO integration with ERP, wiki, messenger, or other business apps.
Most companies need 3–5 apps. Bundle pricing available.

**MFA & Conditional Access Policies** | $180–240 | 6–8h
URL: https://webdirect.md/en/services/identity-access/mfa-conditional-access
MFA enforcement for high-privilege roles, conditional access policies (geo, device, time),
end-user setup instructions, recovery procedures.

**⭐ Seasonal Staff Account Lifecycle Automation** | $720–960 | 24–32h | 3–4 weeks
URL: https://webdirect.md/en/services/identity-access/seasonal-staff-automation
FEATURED SERVICE. Automated provisioning and deprovisioning of seasonal worker accounts.
Bulk creation from CSV/Excel, scheduled deactivation by contract end date, single-action
access revocation across email, ERP, VPN, Wi-Fi simultaneously. Audit log for compliance.
Built on Google Admin SDK or Microsoft Graph API with ERP webhooks.
Target industries: Agriculture, Hospitality, Tourism, Construction, Retail (peak), Logistics.
Tools: Google Admin SDK, Microsoft Graph API, Python, Node.js, PostgreSQL.

**Access Audit & Periodic Reporting** | $240–360 | 8–12h
URL: https://webdirect.md/en/services/identity-access/access-audit
Permission audit across all systems, stale account detection, access model documentation,
periodic reporting templates.

---

### Package 3: Corporate Services — $2,160–$3,420 total

**Corporate File Storage with Access Control** | $300–420 | 10–14h
URL: https://webdirect.md/en/services/corporate-services/file-storage
Google Drive, SharePoint, or self-hosted Nextcloud. Folder structure by department,
sharing policies, permission templates.

**Corporate Messenger Setup (Slack or Mattermost)** | $180–540 | 6–18h
URL: https://webdirect.md/en/services/corporate-services/messenger-setup
Slack: channels, SSO, app integrations ($180–240). OR Mattermost self-hosted: full
deployment, SSO, mobile clients, backups ($420–540).

**Internal Wiki (Wiki.js, BookStack, or Confluence)** | $360–480 | 12–16h
URL: https://webdirect.md/en/services/corporate-services/internal-wiki
Self-hosted wiki deployment with SSO integration, space structure, user permissions,
editor onboarding.

**Shared Calendars & Planning Templates** | $120–180 | 4–6h
URL: https://webdirect.md/en/services/corporate-services/calendars-planning
Shared calendar setup for agriculture (planting/harvest schedules), construction
(project milestones), hospitality (shift rotation), etc.

**Shift Management App for Foremen** | $1,200–$1,800 | 40–60h
URL: https://webdirect.md/en/services/corporate-services/shift-management-app
Lightweight app for foremen: shift logging, output tracking, photo confirmation,
GPS tagging (optional), Excel/accounting export. Built on AppSheet or simple web app.

---

### Package 4: Business Applications — $3,780–$5,580 total

**Odoo ERP Deployment** | $1,200–$1,800 | 40–60h
URL: https://webdirect.md/en/services/business-applications/odoo-deployment
Server installation or Odoo.sh, baseline module config (Inventory, Accounting, Purchase,
Sales, HR, Project), reference data migration, SSO integration, backups.

**ERP Integration with Bank and e-Factura (Moldova)** | $720–$1,200 | 24–40h
URL: https://webdirect.md/en/services/business-applications/erp-bank-efactura-integration
API connectors between ERP and Moldovan e-Factura system (SIA MKTR), bank-client
integration with error handling and queues. Moldova-specific.

**Field Management Software Deployment** | $360–$1,200 | 12–40h
URL: https://webdirect.md/en/services/business-applications/field-management
SaaS (Cropio, OneSoil): $360–480. QGIS + PostGIS self-hosted: $900–$1,200.
Target: Agriculture, Forestry, Mining.

**Telematics Integration (Wialon / Gurtam)** | $600–900 | 20–30h
URL: https://webdirect.md/en/services/business-applications/telematics-integration
Fleet telematics integration with ERP or field management. Vehicle tracking, trip reports,
fuel monitoring.

**Cross-System Integration (ERP ↔ Field ↔ Telematics)** | $900–$1,200 | 30–40h
URL: https://webdirect.md/en/services/business-applications/cross-system-integration
Custom middleware connecting multiple business systems. Event-driven with queues,
error handling, audit logging.

---

### Package 5: Security & Backups — $1,860–$2,640 total

**Backup Strategy 3-2-1** | $480–720 | 16–24h
URL: https://webdirect.md/en/services/security-backups/backup-strategy-321
3 copies, 2 media types, 1 offsite. Automated backup jobs, encryption, monitoring,
retention policy. Tools: Veeam, Restic, borgbackup, Backblaze B2, Wasabi.

**Recovery Testing** | $240–360 | 8–12h
URL: https://webdirect.md/en/services/security-backups/recovery-testing
Backup restore drills for critical systems. RTO/RPO verification, documented test results.

**Workstation Encryption (BitLocker / FileVault)** | $240–360 | 8–12h
URL: https://webdirect.md/en/services/security-backups/workstation-encryption
Full-disk encryption deployment across all workstations with centralized key management.

**EDR / Antivirus** | $300–420 | 10–14h
URL: https://webdirect.md/en/services/security-backups/edr-antivirus
Microsoft Defender for Business or Bitdefender deployment across all endpoints.
Centralized policy management and alerting.

**Basic Incident Response Plan** | $360–480 | 12–16h
URL: https://webdirect.md/en/services/security-backups/incident-response-plan
Documented IRP with playbooks for ransomware, data breach, account compromise.
Tabletop exercise included.

**Email Security (DMARC + Anti-Phishing)** | $240–300 | 8–10h
URL: https://webdirect.md/en/services/security-backups/email-security-dmarc
DMARC p=reject deployment, SPF/DKIM audit, phishing simulation, mailbox rules.

---

### Package 6: Monitoring & Logging — $1,710–$2,340 total

**Infrastructure Monitoring** | $720–960 | 24–32h
URL: https://webdirect.md/en/services/monitoring/infrastructure-monitoring
Zabbix or Prometheus+Grafana. Host/service monitoring, custom dashboards, alert rules.

**External Uptime Monitoring** | $90–120 | 3–4h
URL: https://webdirect.md/en/services/monitoring/uptime-monitoring
UptimeRobot or Better Stack. HTTP/HTTPS checks, SSL expiry, DNS monitoring, status page.

**Centralized Logging (Loki + Grafana or ELK)** | $720–960 | 24–32h
URL: https://webdirect.md/en/services/monitoring/centralized-logging
Log aggregation from all systems. Full-text search, retention policy, alerting on patterns.

**On-Call Alerting in Messenger** | $180–300 | 6–10h
URL: https://webdirect.md/en/services/monitoring/oncall-alerting
Alert routing to Slack/Telegram/PagerDuty. On-call schedule, escalation policies,
runbook links in alerts.

---

### Package 7: Web Presence — $690–$1,020 total

**Corporate Brochure Site (Technical Setup)** | $480–720 | 16–24h
URL: https://webdirect.md/en/services/web-presence/corporate-website
Hugo or Astro on Cloudflare Pages. Technical setup only (no design from scratch).

**SSL + CDN + DDoS Protection (Cloudflare)** | $120–180 | 4–6h
URL: https://webdirect.md/en/services/web-presence/ssl-cdn-ddos
Cloudflare onboarding, SSL/TLS config, DDoS rules, caching policies.

**Certificate & DNS Monitoring** | $90–120 | 3–4h
URL: https://webdirect.md/en/services/web-presence/cert-dns-monitoring
Certificate expiry alerts, DNS record change monitoring, DNSSEC review.

---

### Package 8: Field & Mobility — $2,280–$3,300 total

**Remote Site Connectivity (4G + Starlink)** | $180–300 per location | 6–10h
URL: https://webdirect.md/en/services/field-mobility/remote-connectivity
4G failover or Starlink setup per field location. Integration with office VPN.

**IoT Segment (Sensors, Weather Stations)** | $900–$1,200 | 30–40h
URL: https://webdirect.md/en/services/field-mobility/iot-segment
MQTT broker (Mosquitto), InfluxDB/TimescaleDB storage, Grafana dashboards.
Agricultural sensors, weather stations, soil monitors.

**Foreman Mobile App (AppSheet)** | $1,200–$1,800 | 40–60h
URL: https://webdirect.md/en/services/field-mobility/foreman-mobile-app
No-code app for field foremen: worker shift tracking, output logging, photo proof,
GPS tagging, export to accounting. Built on AppSheet.

---

### Special Packages

**Starter Pack** — $4,500–$6,000 fixed price | 150–200 hours | 6–8 weeks
URL: https://webdirect.md/en/services/
8 core services: Network + VPN setup, Google Workspace, Seasonal Staff Automation,
File Storage, Slack/Teams, Backup Strategy 3-2-1, Email Security (DMARC), Uptime Monitoring.

**Ongoing Support Basic** — $600–$900/month | 20–30 hours/month
Monitoring, incidents, updates, account management. Seasonal scaling available.

**Ongoing Support Extended** — $1,200–$1,800/month | 40–60 hours/month
Basic + new integrations, custom reports, light development. Seasonal scaling available.